b70398aa02486ff525d487dd9a4c8235_JaffaCakes118 | Triage

Sharing

General

Target

b70398aa02486ff525d487dd9a4c8235_JaffaCakes118
Size

976KB
MD5

b70398aa02486ff525d487dd9a4c8235
SHA1

0651f82189e3f8584baf69a67d3013797db4bdbc
SHA256

c0b9957f41b0d56b6ced66296a246131fb13a34df5bbc6f88601e2af48ca8c47
SHA512

f039d78191977c68c79aa9c2bb03aa18576a863c5a8cfc4accecd1c803b4f19c883d24d966e55042a8bb4ffa43f77b406685ee4701ea1579ab09840a1fbdbb44
SSDEEP

12288:Ia3KcWZY17hV1qveS+Qs1n4wpJ6Sn2Tj0NOC2e+GNNwFNjj5SXYSPRBYBHwRuqZT:nzWE70NA94wCSn2de+0KjgoYBgQ4uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b70398aa02486ff525d487dd9a4c8235_JaffaCakes118

Files

b70398aa02486ff525d487dd9a4c8235_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 708KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ